...
| Note |
|---|
It’s important that the values of the three configuration parameters are aligned with each other and the policies of the certificate authorityCertificate Authority. For example, the |
...
The Security Server fetches new OCSP responses using a fixed interval that is 20 minutes by default. The fetch interval is configured on the Central Server using the ocspFetchInterval global configuration parameter extension by the X-Road operator. An OCSP response is considered expired by the Security Server if it was issued too far in the past OR there’s already new status information available.
...
Omitting the nextUpdate attribute is done on the Central Server using the verifyNextUpdate global configuration parameter extension by the X-Road operator.
| Info |
|---|
More information about the |
...